@shamar/adonis 0.1.0

package/dist/shamar/auth.js

@@ -0,0 +1,218 @@
+import { Authorizer, ForbiddenError, UnauthorizedError, extractAuthCredentials, intersectPermissions, isMachineApiKeyPrincipal, resolveUserPermissions, toCherubimUser, } from '@shamar/cherubim';
+export { ForbiddenError, UnauthorizedError };
+/** Whether panel routes should require an authenticated user. */
+export function authRequired(config) {
+    if (config.auth?.required === false)
+        return false;
+    if (config.auth?.required === true)
+        return true;
+    return Boolean(config.auth?.guard || config.auth?.resolveUser || config.auth?.apiKeys);
+}
+export function createAuthorizer(config, policies) {
+    return new Authorizer({
+        superUser: config.auth?.superUser,
+        treatAdminsAsSuper: config.auth?.strictPermissions !== false,
+    }, undefined, policies);
+}
+function requestHeaders(ctx) {
+    const request = ctx.request;
+    return {
+        get(name) {
+            if (typeof request.header === 'function') {
+                return request.header(name) ?? undefined;
+            }
+            const headers = typeof request.headers === 'function' ? request.headers() : (request.headers ?? {});
+            const raw = headers[name] ?? headers[name.toLowerCase()];
+            if (Array.isArray(raw))
+                return raw[0];
+            return typeof raw === 'string' ? raw : undefined;
+        },
+    };
+}
+async function resolveHeaderCredentials(ctx, config) {
+    const resolver = config.auth?.apiKeys?.resolve;
+    if (!resolver)
+        return { gateway: null, bearer: null, bearerInvalid: false };
+    const headers = requestHeaders(ctx);
+    const { apiKey, bearer } = extractAuthCredentials(headers);
+    let gateway = null;
+    let bearerUser = null;
+    let bearerInvalid = false;
+    if (apiKey) {
+        const principal = await resolver(apiKey, ctx);
+        if (principal && isMachineApiKeyPrincipal(principal)) {
+            gateway = principal;
+        }
+        else if (principal && !bearer) {
+            // PAT mistakenly in X-Api-Key with no Bearer — still accept as identity.
+            bearerUser = principal;
+        }
+    }
+    if (bearer) {
+        const principal = await resolver(bearer, ctx);
+        if (principal) {
+            if (isMachineApiKeyPrincipal(principal) && !gateway) {
+                // Single-credential: machine key only in Authorization.
+                gateway = principal;
+            }
+            else if (!isMachineApiKeyPrincipal(principal)) {
+                bearerUser = principal;
+            }
+            // Duplicate machine key in Bearer while X-Api-Key already set — ignore Bearer.
+        }
+        else {
+            bearerInvalid = true;
+        }
+    }
+    return { gateway, bearer: bearerUser, bearerInvalid };
+}
+async function resolveSessionUser(ctx, config) {
+    if (config.auth?.resolveUser) {
+        const user = await config.auth.resolveUser(ctx);
+        return user ?? null;
+    }
+    const guard = config.auth?.guard ?? 'web';
+    try {
+        const auth = ctx.auth?.use(guard);
+        if (!auth || !(await auth.check()))
+            return null;
+        const raw = auth.user;
+        if (!raw)
+            return null;
+        const id = raw.id ?? raw._id;
+        if (id == null || id === '')
+            return null;
+        const name = (typeof raw.fullName === 'string' && raw.fullName.trim()) ||
+            (typeof raw.name === 'string' && raw.name.trim()) ||
+            (typeof raw.email === 'string' ? raw.email.split('@')[0] : '') ||
+            String(id);
+        return toCherubimUser({
+            id: String(id),
+            name,
+            email: typeof raw.email === 'string' ? raw.email : undefined,
+            permissions: Array.isArray(raw.permissions) ? raw.permissions : undefined,
+            roleIds: Array.isArray(raw.roleIds)
+                ? raw.roleIds
+                : raw.roleId != null && raw.roleId !== ''
+                    ? [String(raw.roleId)]
+                    : Array.isArray(raw.roles)
+                        ? raw.roles
+                        : undefined,
+        });
+    }
+    catch {
+        return null;
+    }
+}
+/** Map header credentials / session to a Cherubim principal. */
+export async function resolveShamarUser(ctx, config) {
+    const { gateway, bearer } = await resolveHeaderCredentials(ctx, config);
+    if (bearer)
+        return bearer;
+    if (gateway)
+        return gateway;
+    return resolveSessionUser(ctx, config);
+}
+export async function buildAuthContext(ctx, config, panelId) {
+    const { gateway, bearer, bearerInvalid } = await resolveHeaderCredentials(ctx, config);
+    // Invalid Bearer must not fall through to the gateway principal.
+    if (bearerInvalid) {
+        return {
+            user: null,
+            panelId,
+            gatewayApiKeyId: gateway?.apiKeyId,
+        };
+    }
+    const sessionUser = bearer || gateway ? null : await resolveSessionUser(ctx, config);
+    let user = bearer ?? sessionUser ?? gateway;
+    let authMethod;
+    if (bearer) {
+        authMethod = 'pat';
+    }
+    else if (sessionUser) {
+        authMethod = 'session';
+    }
+    else if (gateway) {
+        authMethod = 'api_key';
+    }
+    const apiKeyId = user?.apiKeyId;
+    const gatewayApiKeyId = gateway?.apiKeyId;
+    // Session + PAT: merge role permissions. Machine keys already carry abilities.
+    if (user && config.auth?.roleResolver && !isMachineApiKeyPrincipal(user)) {
+        user = await resolveUserPermissions(user, config.auth.roleResolver);
+    }
+    // PAT: optional ability narrowing after role merge (empty = full user access).
+    if (authMethod === 'pat') {
+        user = {
+            ...user,
+            permissions: intersectPermissions(user.permissions ?? [], user.apiKeyAbilities),
+        };
+    }
+    // Dual credentials: optionally cap the user by the gateway machine key’s abilities.
+    const intersectGateway = config.auth?.apiKeys?.intersectGatewayAbilities !== false;
+    if (intersectGateway &&
+        gateway &&
+        user &&
+        !isMachineApiKeyPrincipal(user) &&
+        Array.isArray(gateway.permissions) &&
+        gateway.permissions.length > 0) {
+        user = {
+            ...user,
+            permissions: intersectPermissions(user.permissions ?? [], gateway.permissions),
+        };
+    }
+    return { user, panelId, authMethod, apiKeyId, gatewayApiKeyId };
+}
+/**
+ * API-prefix requests may require a valid machine gateway key when the
+ * `requireApiKey` middleware is applied to the route (or `auth.apiKeys.protectApi`).
+ *
+ * @deprecated Prefer {@link RequireApiKeyMiddleware} / `protectApi`. Kept for
+ * callers that still pass an explicit API-route flag.
+ */
+export function missingRequiredMachineKey(authCtx, config, isApiRoute) {
+    if (!isApiRoute)
+        return false;
+    if (!config.auth?.apiKeys?.protectApi)
+        return false;
+    return !authCtx.gatewayApiKeyId;
+}
+export function resourcePolicyFlags(authorizer, authCtx, registry, meta, record) {
+    const ResourceClass = registry.resourceClass(meta.slug);
+    if (!ResourceClass || !authCtx.user) {
+        return { create: true, update: true, delete: true };
+    }
+    return {
+        create: authorizer.canResource(authCtx, ResourceClass, 'create'),
+        update: authorizer.canResource(authCtx, ResourceClass, 'update', record ?? undefined),
+        delete: authorizer.canResource(authCtx, ResourceClass, 'delete', record ?? undefined),
+    };
+}
+export function canViewResource(authorizer, authCtx, registry, slug) {
+    const ResourceClass = registry.resourceClass(slug);
+    if (!ResourceClass)
+        return true;
+    if (!authCtx.user)
+        return false;
+    return authorizer.canResource(authCtx, ResourceClass, 'viewAny');
+}
+export function respondUnauthorized(ctx, config, asJson, message = 'Authentication required.') {
+    if (asJson) {
+        return ctx.response.status(401).json({ message });
+    }
+    return ctx.response.redirect(config.auth?.loginPath ?? '/login');
+}
+export function respondForbidden(ctx, message, asJson, fallbackPath) {
+    if (asJson) {
+        return ctx.response.status(403).json({ message });
+    }
+    ctx.session.flash('error', message);
+    return ctx.response.redirect(fallbackPath);
+}
+export function assertResourceAccess(authorizer, authCtx, registry, meta, action, record) {
+    const ResourceClass = registry.resourceClass(meta.slug);
+    if (!ResourceClass)
+        return;
+    authorizer.assertResource(authCtx, ResourceClass, action, record);
+}
+//# sourceMappingURL=auth.js.map

package/dist/shamar/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/shamar/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EACV,cAAc,EAEd,iBAAiB,EACjB,sBAAsB,EAGtB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,cAAc,GAIf,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;AAE7C,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,IAAI,MAAM,CAAC,IAAI,EAAE,QAAQ,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAoB,EAAE,QAAwB;IAC7E,OAAO,IAAI,UAAU,CACnB;QACE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS;QACjC,kBAAkB,EAAE,MAAM,CAAC,IAAI,EAAE,iBAAiB,KAAK,KAAK;KAC7D,EACD,SAAS,EACT,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAsB;IAG5C,MAAM,OAAO,GAAG,GAAG,CAAC,OAGnB,CAAC;IAEF,OAAO;QACL,GAAG,CAAC,IAAY;YACd,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACzC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;YAC3C,CAAC;YACD,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACtF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YACtC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC;AAWD,KAAK,UAAU,wBAAwB,CACrC,GAAsB,EACtB,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAE5E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAE3D,IAAI,OAAO,GAAwB,IAAI,CAAC;IACxC,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,SAAS,IAAI,wBAAwB,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;aAAM,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,yEAAyE;YACzE,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpD,wDAAwD;gBACxD,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;iBAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChD,UAAU,GAAG,SAAS,CAAC;YACzB,CAAC;YACD,+EAA+E;QACjF,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAsB,EACtB,MAAoB;IAEpB,IAAI,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAEhD,MAAM,GAAG,GAAG,IAAI,CAAC,IAA2C,CAAC;QAC7D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC;QAC7B,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,IAAI,GACR,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzD,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACjD,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,EAAE,CAAC,CAAC;QAEb,OAAO,cAAc,CAAC;YACpB,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YACd,IAAI;YACJ,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC5D,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,WAAwB,CAAC,CAAC,CAAC,SAAS;YACvF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBACjC,CAAC,CAAE,GAAG,CAAC,OAAoB;gBAC3B,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;oBACvC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;wBACxB,CAAC,CAAE,GAAG,CAAC,KAAkB;wBACzB,CAAC,CAAC,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAsB,EACtB,MAAoB;IAEpB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAsB,EACtB,MAAoB,EACpB,OAAgB;IAEhB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEvF,iEAAiE;IACjE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,IAAI;YACV,OAAO;YACP,eAAe,EAAE,OAAO,EAAE,QAAQ;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAErF,IAAI,IAAI,GAAwB,MAAM,IAAI,WAAW,IAAI,OAAO,CAAC;IACjE,IAAI,UAA8C,CAAC;IAEnD,IAAI,MAAM,EAAE,CAAC;QACX,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACvB,UAAU,GAAG,SAAS,CAAC;IACzB,CAAC;SAAM,IAAI,OAAO,EAAE,CAAC;QACnB,UAAU,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,CAAC;IAChC,MAAM,eAAe,GAAG,OAAO,EAAE,QAAQ,CAAC;IAE1C,+EAA+E;IAC/E,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,IAAI,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtE,CAAC;IAED,+EAA+E;IAC/E,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,IAAI,GAAG;YACL,GAAG,IAAK;YACR,WAAW,EAAE,oBAAoB,CAAC,IAAK,CAAC,WAAW,IAAI,EAAE,EAAE,IAAK,CAAC,eAAe,CAAC;SAClF,CAAC;IACJ,CAAC;IAED,oFAAoF;IACpF,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,yBAAyB,KAAK,KAAK,CAAC;IACnF,IACE,gBAAgB;QAChB,OAAO;QACP,IAAI;QACJ,CAAC,wBAAwB,CAAC,IAAI,CAAC;QAC/B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QAClC,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAC9B,CAAC;QACD,IAAI,GAAG;YACL,GAAG,IAAI;YACP,WAAW,EAAE,oBAAoB,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC;SAC/E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA6B,EAC7B,MAAoB,EACpB,UAAmB;IAEnB,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;AAClC,CAAC;AAQD,MAAM,UAAU,mBAAmB,CACjC,UAAsB,EACtB,OAA6B,EAC7B,QAA0B,EAC1B,IAAkB,EAClB,MAAuC;IAEvC,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC;QAChE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,IAAI,SAAS,CAAC;QACrF,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,IAAI,SAAS,CAAC;KACtF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,UAAsB,EACtB,OAA6B,EAC7B,QAA0B,EAC1B,IAAY;IAEZ,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAsB,EACtB,MAAoB,EACpB,MAAe,EACf,OAAO,GAAG,0BAA0B;IAEpC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAsB,EACtB,OAAe,EACf,MAAe,EACf,YAAoB;IAEpB,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,UAAsB,EACtB,OAA6B,EAC7B,QAA0B,EAC1B,IAAkB,EAClB,MAAsB,EACtB,MAAgC;IAEhC,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,aAAa;QAAE,OAAO;IAC3B,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC"}

package/dist/shamar/branding.d.ts

@@ -0,0 +1,24 @@
+export interface ShamarBranding {
+    brandName: string;
+    logoUrl?: string;
+    logoDarkUrl?: string;
+    copyrightText?: string;
+    fontFamily: string;
+    fontUrl?: string;
+    primaryColor: string;
+    accentColor: string;
+}
+export declare const DEFAULT_SHAMAR_BRANDING: ShamarBranding;
+export declare function mergeBranding(base: ShamarBranding, override?: Partial<ShamarBranding>): ShamarBranding;
+export declare function resolveBranding(config?: {
+    name?: string;
+    logo?: string;
+    logoDark?: string;
+    copyright?: string;
+    fontFamily?: string;
+    fontUrl?: string;
+    primaryColor?: string;
+    accentColor?: string;
+}): ShamarBranding;
+export declare function buildBrandingCss(branding: ShamarBranding): string;
+//# sourceMappingURL=branding.d.ts.map

package/dist/shamar/branding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../src/shamar/branding.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,uBAAuB,EAAE,cAKrC,CAAC;AAEF,wBAAgB,aAAa,CAC3B,IAAI,EAAE,cAAc,EACpB,QAAQ,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GACjC,cAAc,CAQhB;AAED,wBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,cAAc,CAWjB;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAkDjE"}

package/dist/shamar/branding.js

@@ -0,0 +1,91 @@
+export const DEFAULT_SHAMAR_BRANDING = {
+    brandName: 'Admin',
+    fontFamily: 'ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji"',
+    primaryColor: '#f1511b',
+    accentColor: '#286291',
+};
+export function mergeBranding(base, override) {
+    if (!override)
+        return { ...base };
+    return {
+        ...base,
+        ...Object.fromEntries(Object.entries(override).filter(([, value]) => value !== undefined && value !== '')),
+    };
+}
+export function resolveBranding(config) {
+    return mergeBranding(DEFAULT_SHAMAR_BRANDING, {
+        brandName: config?.name,
+        logoUrl: config?.logo,
+        logoDarkUrl: config?.logoDark,
+        copyrightText: config?.copyright,
+        fontFamily: config?.fontFamily,
+        fontUrl: config?.fontUrl,
+        primaryColor: config?.primaryColor,
+        accentColor: config?.accentColor,
+    });
+}
+export function buildBrandingCss(branding) {
+    const primary = normalizeHexColor(branding.primaryColor) ?? DEFAULT_SHAMAR_BRANDING.primaryColor;
+    const accent = normalizeHexColor(branding.accentColor) ?? DEFAULT_SHAMAR_BRANDING.accentColor;
+    const fontFamily = branding.fontFamily;
+    return `/* Shamar admin branding — generated at runtime */
+:root {
+  --shamar-font-family: ${fontFamily};
+  --color-primary-500: ${primary};
+  --color-primary-50: color-mix(in srgb, ${primary} 10%, white);
+  --color-primary-100: color-mix(in srgb, ${primary} 20%, white);
+  --color-primary-200: color-mix(in srgb, ${primary} 35%, white);
+  --color-primary-300: color-mix(in srgb, ${primary} 55%, white);
+  --color-primary-400: color-mix(in srgb, ${primary} 78%, white);
+  --color-primary-600: color-mix(in srgb, ${primary} 88%, black);
+  --color-primary-700: color-mix(in srgb, ${primary} 75%, black);
+  --color-primary-800: color-mix(in srgb, ${primary} 62%, black);
+  --color-primary-900: color-mix(in srgb, ${primary} 48%, black);
+  --color-primary-950: color-mix(in srgb, ${primary} 32%, black);
+  --color-shamar-primary: ${primary};
+  --color-fg-brand: ${primary};
+  --color-fg-brand-strong: color-mix(in srgb, ${primary} 62%, black);
+  --color-brand-soft: color-mix(in srgb, ${primary} 20%, white);
+  --color-brand-softer: color-mix(in srgb, ${primary} 20%, white);
+  --color-default: color-mix(in srgb, ${primary} 35%, white);
+  --color-neutral-secondary: color-mix(in srgb, ${primary} 10%, white);
+  --color-neutral-tertiary: color-mix(in srgb, ${primary} 20%, white);
+  --color-shamar-shell: color-mix(in srgb, color-mix(in srgb, ${primary} 10%, white) 35%, white);
+  --color-shamar-accent: ${accent};
+  accent-color: var(--color-fg-brand);
+}
+
+.dark {
+  --color-fg-brand: ${primary};
+  --color-fg-brand-strong: color-mix(in srgb, ${primary} 78%, white);
+  --color-brand-soft: color-mix(in srgb, ${primary} 48%, black);
+  --color-brand-softer: color-mix(in srgb, ${primary} 32%, black);
+  --color-shamar-shell: var(--color-gray-800);
+  --color-neutral-primary: var(--color-gray-900);
+  --color-neutral-secondary: var(--color-gray-800);
+  --color-neutral-tertiary: #151c28;
+  --color-default: var(--color-gray-700);
+  accent-color: var(--color-fg-brand);
+}
+
+body {
+  font-family: var(--shamar-font-family);
+  accent-color: var(--color-fg-brand);
+}
+`;
+}
+function normalizeHexColor(value) {
+    const trimmed = value.trim();
+    const match = trimmed.match(/^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/);
+    if (!match)
+        return undefined;
+    const hex = match[1];
+    if (hex.length === 3) {
+        return `#${hex
+            .split('')
+            .map((char) => char + char)
+            .join('')}`;
+    }
+    return `#${hex.toLowerCase()}`;
+}
+//# sourceMappingURL=branding.js.map

package/dist/shamar/branding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branding.js","sourceRoot":"","sources":["../../src/shamar/branding.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,uBAAuB,GAAmB;IACrD,SAAS,EAAE,OAAO;IAClB,UAAU,EAAE,6EAA6E;IACzF,YAAY,EAAE,SAAS;IACvB,WAAW,EAAE,SAAS;CACvB,CAAC;AAEF,MAAM,UAAU,aAAa,CAC3B,IAAoB,EACpB,QAAkC;IAElC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAClC,OAAO;QACL,GAAG,IAAI;QACP,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CACpF;KACgB,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAS/B;IACC,OAAO,aAAa,CAAC,uBAAuB,EAAE;QAC5C,SAAS,EAAE,MAAM,EAAE,IAAI;QACvB,OAAO,EAAE,MAAM,EAAE,IAAI;QACrB,WAAW,EAAE,MAAM,EAAE,QAAQ;QAC7B,aAAa,EAAE,MAAM,EAAE,SAAS;QAChC,UAAU,EAAE,MAAM,EAAE,UAAU;QAC9B,OAAO,EAAE,MAAM,EAAE,OAAO;QACxB,YAAY,EAAE,MAAM,EAAE,YAAY;QAClC,WAAW,EAAE,MAAM,EAAE,WAAW;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAwB;IACvD,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,uBAAuB,CAAC,YAAY,CAAC;IACjG,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,uBAAuB,CAAC,WAAW,CAAC;IAC9F,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IAEvC,OAAO;;0BAEiB,UAAU;yBACX,OAAO;2CACW,OAAO;4CACN,OAAO;4CACP,OAAO;4CACP,OAAO;4CACP,OAAO;4CACP,OAAO;4CACP,OAAO;4CACP,OAAO;4CACP,OAAO;4CACP,OAAO;4BACvB,OAAO;sBACb,OAAO;gDACmB,OAAO;2CACZ,OAAO;6CACL,OAAO;wCACZ,OAAO;kDACG,OAAO;iDACR,OAAO;gEACQ,OAAO;2BAC5C,MAAM;;;;;sBAKX,OAAO;gDACmB,OAAO;2CACZ,OAAO;6CACL,OAAO;;;;;;;;;;;;;CAanD,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACtB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,GAAG;aACX,KAAK,CAAC,EAAE,CAAC;aACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC;aAC1B,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;AACjC,CAAC"}

package/dist/shamar/display-relations.d.ts

@@ -0,0 +1,7 @@
+import type { DataAdapter, ResourceMeta, ResourceRegistry } from '@shamar/core';
+/**
+ * Hydrate relation dot-paths on records for table columns / infolist entries.
+ * e.g. `company.name` attaches `record.company = { name: 'Acme' }`.
+ */
+export declare function hydrateRecordsForDisplay(meta: ResourceMeta, records: Record<string, unknown>[], registry: ResourceRegistry, adapter: DataAdapter): Promise<void>;
+//# sourceMappingURL=display-relations.d.ts.map

package/dist/shamar/display-relations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"display-relations.d.ts","sourceRoot":"","sources":["../../src/shamar/display-relations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAOhF;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAClC,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CA0Cf"}

package/dist/shamar/display-relations.js

@@ -0,0 +1,89 @@
+import { relationTitleAttribute, resolveRelationDisplayBindings, } from '@shamar/core';
+/**
+ * Hydrate relation dot-paths on records for table columns / infolist entries.
+ * e.g. `company.name` attaches `record.company = { name: 'Acme' }`.
+ */
+export async function hydrateRecordsForDisplay(meta, records, registry, adapter) {
+    if (records.length === 0)
+        return;
+    const bindings = resolveRelationDisplayBindings(meta);
+    if (bindings.length === 0)
+        return;
+    const groups = groupBindingsByField(bindings);
+    const lookups = new Map();
+    for (const [groupKey, group] of groups) {
+        const ids = collectRelatedIds(records, group.binding);
+        if (ids.size === 0)
+            continue;
+        const relatedMeta = registry.require(group.binding.relation.resource);
+        const titleAttribute = relationTitleAttribute(group.binding.relation);
+        const results = await adapter.search(relatedMeta, {
+            ids: [...ids],
+            titleAttribute,
+            limit: Math.max(ids.size, 25),
+        });
+        const byId = new Map();
+        for (const row of results) {
+            const id = String(row.id);
+            const existing = byId.get(id) ?? { id };
+            for (const binding of group.bindings) {
+                existing[binding.attribute] =
+                    binding.attribute === titleAttribute ? row.label : row.label;
+            }
+            byId.set(id, existing);
+        }
+        lookups.set(groupKey, byId);
+    }
+    for (const record of records) {
+        for (const [groupKey, group] of groups) {
+            const byId = lookups.get(groupKey);
+            if (!byId)
+                continue;
+            attachRelatedRecord(record, group.binding, byId);
+        }
+    }
+}
+function groupBindingsByField(bindings) {
+    const groups = new Map();
+    for (const binding of bindings) {
+        const key = binding.fieldName;
+        const existing = groups.get(key);
+        if (existing) {
+            existing.bindings.push(binding);
+            continue;
+        }
+        groups.set(key, { binding, bindings: [binding] });
+    }
+    return groups;
+}
+function collectRelatedIds(records, binding) {
+    const ids = new Set();
+    for (const record of records) {
+        const raw = record[binding.fieldName];
+        if (binding.relation.kind === 'belongsTo') {
+            if (raw != null && raw !== '')
+                ids.add(String(raw));
+            continue;
+        }
+        if (Array.isArray(raw)) {
+            for (const item of raw) {
+                if (item != null && String(item).trim() !== '')
+                    ids.add(String(item));
+            }
+        }
+    }
+    return ids;
+}
+function attachRelatedRecord(record, binding, byId) {
+    const raw = record[binding.fieldName];
+    if (binding.relation.kind === 'belongsTo') {
+        const id = raw != null && raw !== '' ? String(raw) : null;
+        record[binding.root] = id ? (byId.get(id) ?? null) : null;
+        return;
+    }
+    const idList = Array.isArray(raw) ? raw.map((item) => String(item)).filter(Boolean) : [];
+    record[binding.root] = idList
+        .map((id) => byId.get(id))
+        .filter((item) => item != null);
+}
+//# sourceMappingURL=display-relations.js.map

package/dist/shamar/display-relations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"display-relations.js","sourceRoot":"","sources":["../../src/shamar/display-relations.ts"],"names":[],"mappings":"AACA,OAAO,EACL,sBAAsB,EACtB,8BAA8B,GAE/B,MAAM,cAAc,CAAC;AAEtB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAkB,EAClB,OAAkC,EAClC,QAA0B,EAC1B,OAAoB;IAEpB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,MAAM,QAAQ,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;IAExE,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QAE7B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;YAChD,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;YACb,cAAc;YACd,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;SAC9B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmC,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACxC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;oBACzB,OAAO,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC;AAOD,SAAS,oBAAoB,CAAC,QAAkC;IAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAkC,EAClC,OAA+B;IAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC1C,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE;gBAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBACvB,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;oBAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA+B,EAC/B,OAA+B,EAC/B,IAA0C;IAE1C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM;SAC1B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SACzB,MAAM,CAAC,CAAC,IAAI,EAAmC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;AACrE,CAAC"}

package/dist/shamar/list-headers.d.ts

@@ -0,0 +1,38 @@
+import type { ListFilter, ResourceMeta } from '@shamar/core';
+export type ListHeaderFilterKind = 'boolean' | 'select' | 'm2o';
+export type ListHeaderGroupKind = ListHeaderFilterKind;
+export interface ListHeaderOption {
+    label: string;
+    value: string | boolean | number;
+    id?: string;
+}
+/** Toolbar filter/group metadata derived from table columns + form fields. */
+export interface ListHeader {
+    name: string;
+    label: string;
+    filter_kind?: ListHeaderFilterKind;
+    group_kind?: ListHeaderGroupKind;
+    /** DB / filter field (e.g. companyId for company.name). */
+    filterField?: string;
+    options?: ListHeaderOption[];
+}
+/**
+ * Build toolbar headers for Filters / Group menus.
+ * Boolean columns, matching Select fields, and BelongsTo display columns are included by default.
+ */
+export declare function buildListHeaders(meta: ResourceMeta): ListHeader[];
+export declare function parseListFilters(raw: unknown): ListFilter[];
+/** Fill missing chip labels for default / URL filters using list headers. */
+export declare function labelListFilters(filters: ListFilter[], headers: ListHeader[]): ListFilter[];
+/**
+ * Resolve resource defaultFilters, mapping column names to filter fields when needed.
+ */
+export declare function resolveDefaultFilters(meta: ResourceMeta, headers: ListHeader[]): ListFilter[];
+export interface ListGroupSection {
+    key: string;
+    label: string;
+    items: Record<string, unknown>[];
+}
+/** Group consecutive records for table rendering (caller should sort by groupBy first). */
+export declare function groupRecordsForDisplay(items: Record<string, unknown>[], groupBy: string | undefined, headers: ListHeader[]): ListGroupSection[] | null;
+//# sourceMappingURL=list-headers.d.ts.map

package/dist/shamar/list-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-headers.d.ts","sourceRoot":"","sources":["../../src/shamar/list-headers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA6B,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAGvF,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAA;AAC/D,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,CAAA;AAEtD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;IAChC,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,oBAAoB,CAAA;IAClC,UAAU,CAAC,EAAE,mBAAmB,CAAA;IAChC,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAC7B;AAyCD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,UAAU,EAAE,CAmEjE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,EAAE,CA8B3D;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,UAAU,EAAE,GACpB,UAAU,EAAE,CAqBd;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,UAAU,EAAE,GACpB,UAAU,EAAE,CAed;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;CACjC;AAED,2FAA2F;AAC3F,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAChC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,UAAU,EAAE,GACpB,gBAAgB,EAAE,GAAG,IAAI,CA8B3B"}